Agenda

Monday, April 27

8:00 am Registration and Morning Refreshments

Capital Ballroom Foyer

9:00 am Opening Remarks

Capital Ballroom Salons 4/5

Lem Stewart, Chief Information Officer, Commonwealth of Virginia

9:15 am Opening Keynote

Capital Ballroom Salons 4/5

Sol Bermann, Privacy Director, Wal-Mart

Privacy: State of the States

Privacy has become one of the most complex and pressing subjects of the information age. From the demands of open government and homeland security to the very nature of technology itself, state and local governments are faced with some serious challenges in how to strike a reasonable balance in the face of dwindling resources. Sol Bermann has a highly unique public/private sector perspective as the Privacy Director for the world's largest company as well as previously serving as the Chief Privacy Officer for the State of Ohio. In today's keynote address, Sol focuses on the trends, laws, policies and best practices that will help you find the right balance and keep you ahead of the curve.

10:15 am Morning Break and Refreshments

Capital Ballroom Foyer

---

10:45 am Concurrent Sessions

National Cybersecurity Agenda
Madison/Jefferson/Monroe

In early February, President Obama ordered an immediate two-month review of the federal government's various cybersecurity programs - a move that could set the stage for a substantial overhaul of government's cybersecurity activities as well as new legislation for data protection and security breach notification. This session focuses on the new cybersecurity agenda and what it means to you.

Tim McKnight, Vice President & Chief Information Officer, Information Systems - Intelligence Division, Northrop Grumman Corporation

Transparency and open government are currently two of the highest federal priorities. The guiding principle is that information maintained by government is a public asset, and whatever data you are storing may have value to the public. The ramifications on IT systems, policies and personnel can be significant. This session discusses the impact of transparency and open government and how to best move forward.

Alison Anderson, Webmaster, Department of Planning & Budget, Commonwealth of Virginia

Kathy Graham, Business Intelligence Competency Center, Virginia Enterprise Applications Program (VEAP), Commonwealth of Virginia

April Gunn, Director, Data Analysis & Commonwealth Data Point, Auditor of Public Accounts, Commonwealth of Virginia

The public sector now exceeds the private industry in the number of identities exposed, making data security one of the biggest challenges faced by governments today. It is not just a matter of technology - it is also a matter of policy and organization-wide agreement of what information needs to be stored and what doesn't. This session offers a look at some of the policies and practices currently being used in both public and private sectors.

Lisa Wallmeyer, Executive Director, Virginia Joint Commission on Technology & Science

11:45 am Lunch

Capital Ballroom Salons 4/5

12:20 am Afternoon Kick-off Remarks

Capital Ballroom Salons 4/5

John McDonald, Deputy Secretary of Technology, Commonwealth of Virginia

12:35 pm General Session

Capital Ballroom Salons 4/5

Hacking, Social Engineering and Other Things That Keep Us Awake at Night

Johnny Long, Hacker, Security Expert, and Author

The first step in preventing a security problem is to know that a threat exists in the first place. In this fascinating and entertaining presentation, Johnny shows us just what we're up against out there. In his own words: "I am a hacker. I've been a professional hacker for over ten years. I've spent the bulk of my career breaking into computer networks and sliding past security guards to gain access to secure facilities." Johnny is an ethical hacker, however, and he is most definitely on our side. His perspective sheds new light on the security challenges that face us daily.

---

1:30 pm Afternoon Break and Refreshments

Capital Ballroom Foyer

---

2:00 pm Concurrent Sessions

Commonwealth Security Tools
Madison/Jefferson/Monroe

VITA and the Commonwealth Security Council have made great advances in creating a portfolio of tools and processes designed to protect citizen data and provide a safe, secure technology environment, while aligning with emerging federal guidelines and priorities. This session covers what has been accomplished so far, what is coming in the near future, and how agencies and jurisdictions can participate and benefit.

Host: Peggy Ward, Chief Information Security & Internal Audit Officer, Virginia Information Technologies Agency (VITA), Commonwealth of Virginia

Nakita Albritton, Manager, Information Security/COOP Coordinator, Commonwealth Security and Risk Management, Virginia Information Technologies Agency (VITA), Commonwealth of Virginia

Michael Watson, Security Incident Management Director, Virginia Information Technologies Agency (VITA), Commonwealth of Virginia

A comprehensive security plan has to start with user authentication. It is not an easy task when the range of users is constantly growing and shifting, as are potential threats. Using just one tactic is not enough - it takes a combination of technologies and procedures. This session looks at the latest technologies and approaches as well as their strengths and shortcomings.

Harry J. Regan, Professional Services Manager - Security Solutions, Verizon Business

Enterprise governance starts with people, processes and information. Effective integration of information security governance into agencies' overall governance frameworks results in: appropriate accountability, strategic investment and effective risk management. This session offers a look at some of the integration strategies and practices currently being used in the Commonwealth.

Joe Kapelewski, Assistant Director of Accounting and Internal Control Compliance Oversight (AICCO), Department of Accounts, Commonwealth of Virginia

Shirley Payne, Vice President and Chief Information Officer, University of Virginia

Jack Spooner, State Internal Auditor, Department of Accounts, Commonwealth of Virginia

---

3:00 pm General Session

Capital Ballroom Salons 4/5

Security Incident Response: Case Studies

How quickly can you respond to a security threat? Data theft, system attacks, operational errors -- the list can seem endless. Fortunately, a threat loses its strength once it is identified and understood. Therefore, the key to survival is spotting a threat before it wreaks havoc, and better yet, to prevent it from happening in the first place. This session analyzes several actual incidents with the goal of raising awareness and reducing reaction time.

4:00 pm Executive Reception

Capital Ballroom Foyer